Summary and recommendation
Appcues, the product adoption platform used by product managers and growth teams, explicitly does not support SCIM provisioning on any plan—not even Enterprise. While Appcues offers SAML 2.0 SSO integration starting at the Enterprise tier with just-in-time (JIT) provisioning, this only creates users during first login and provides no automated deprovisioning capabilities. For product teams where access needs change frequently as people move between projects or leave the company, this creates a significant security gap.
The lack of SCIM means IT teams must manually manage user lifecycle for Appcues accounts, even though the platform handles sensitive product analytics and user flow data. When employees leave or change roles, their Appcues access remains active until manually revoked—a compliance risk that's particularly problematic given Appcues' role in tracking user behavior and product metrics. With MAU-based pricing starting at $300/month and scaling significantly with usage, paying for orphaned accounts also creates unnecessary cost bloat.
The strategic alternative
Stitchflow provides managed provisioning automation for Appcues without requiring Enterprise plans or custom development. Full user lifecycle management including automated deprovisioning. Flat pricing under $5K/year, regardless of your Appcues plan or team size.
Quick SCIM facts
| SCIM available? | No |
| SCIM tier required | N/A |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | Via third-party | ❌ | SSO via SAML 2.0 supported with Okta through manual configuration. Contact support@appcues.com to set up SSO. No SCIM provisioning available. |
| Microsoft Entra ID | Via third-party | ❌ | Azure AD SAML SSO supported through manual configuration. Contact support@appcues.com to set up SSO. No SCIM provisioning available. |
| Google Workspace | Via third-party | ❌ | No native support |
| OneLogin | Via third-party | ❌ | No native support |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Appcues accounts manually. Here's what that costs:
The Appcues pricing problem
Appcues gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Start | $300/month | ||
| Grow | $750/month | ||
| Enterprise | Custom quote |
Pricing and provisioning matrix
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Start | $300/month | ||
| Grow | $750/month | ||
| Enterprise | Custom quote |
Key constraint: SSO requires Enterprise pricing, which starts with custom quotes above $750/month and includes a 1,000 MAU minimum with annual billing requirements.
What this means in practice
For product teams scaling user onboarding
Growth implications
Additional constraints
Summary of challenges
- Appcues does not provide native SCIM at any price tier
- Organizations must rely on third-party tools or manual provisioning
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What Appcues actually offers for identity
SAML SSO (Enterprise only)
Appcues provides SAML 2.0 single sign-on, but only on their Enterprise tier:
| Setting | Details |
|---|---|
| Protocol | SAML 2.0 |
| Supported IdPs | Okta, OneLogin, Azure AD, generic SAML |
| JIT Provisioning | ✓ Yes |
| Configuration | Manual setup via support team |
| User requirement | Contact support@appcues.com to configure |
The catch: You must upgrade to Enterprise pricing (custom, but significantly higher than the $750/month Grow plan) just to get basic SSO functionality.
What's explicitly missing
Appcues documentation is clear about what they don't support:
| Feature | Supported? |
|---|---|
| SCIM provisioning | ❌ No |
| Automated user creation | ❌ No (JIT only) |
| Automated user deprovisioning | ❌ No |
| Group-based access control | ❌ No |
| OpenID Connect | ❌ Planned but not certified |
The reality: Even on Enterprise, you get JIT provisioning for new logins but zero automation for user lifecycle management. When team members leave, you're manually removing them from Appcues.
Okta Integration (password vaulting only)
The Okta Integration Network listing shows limited capabilities:
| Feature | Available |
|---|---|
| SWA (password vaulting) | ✓ Yes |
| SAML SSO | Requires Enterprise + manual config |
| User provisioning | ❌ No |
| Group push | ❌ No |
For product teams managing flow builders and analytics access across different user types, this means entirely manual user management even after paying Enterprise rates.
What IT admins are saying
Appcues's lack of SCIM support forces IT teams into manual user management workflows:
- No automated user provisioning or deprovisioning available
- SSO requires expensive Enterprise plan upgrade
- Manual account creation needed even with SSO configured
- MAU-based pricing creates unpredictable costs as usage scales
SCIM is NOT currently supported
SSO only available on Enterprise plan
The recurring theme
IT teams must manually create and remove user accounts in Appcues, even with SSO enabled. When product managers or growth team members join or leave, there's no automated way to sync these changes from your identity provider to Appcues.
The decision
| Your Situation | Recommendation |
|---|---|
| Small product team (<10 users) | Manual management is acceptable given no SCIM option |
| Growing SaaS with stable product team | Manual management with Enterprise SSO for authentication |
| Large organization (30+ product users) | Use Stitchflow: automation essential for user lifecycle management |
| Enterprise with compliance requirements | Use Stitchflow: automation essential for audit trail and deprovisioning |
| Multi-product teams with frequent role changes | Use Stitchflow: automation strongly recommended for access control |
The bottom line
Appcues explicitly doesn't support SCIM provisioning, leaving Enterprise customers with only manual user management despite premium pricing. For product teams that need automated provisioning and deprovisioning across their growth stack, Stitchflow delivers the automation that Appcues simply can't provide natively.
Automate Appcues without third-party complexity
Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Appcues at <$5K/year, flat, regardless of team size.
Technical specifications
SCIM Version
Not specifiedSupported Operations
Not specifiedSupported Attributes
Plan requirement
Not specifiedPrerequisites
Not specifiedKey limitations
- SCIM is NOT currently supported
- SSO only available on Enterprise plan
- OpenID Connect support planned but not yet certified
- Access tokens expire after 1 hour (auto-refresh for 30 days)
Documentation not available.
Unlock SCIM for
Appcues
Appcues doesn't offer SCIM. Get an enterprise-grade SCIM endpoint in your IdP, even without native support.
See how it works